IT Compliance Engineer

Integrated IT Group; Twinsburg (OH); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Professional development opportunities

Job summary

Integrated IT Group is seeking a Compliance Engineer to develop, implement, and maintain IT security policies ensuring client systems meet legal and regulatory requirements. The role involves audits, risk assessments, remediation, and occasional onsite work for clients.

The ideal candidate has 3+ years in IT compliance or information security, with strong communication and project management skills, and familiarity with CMMC, ISO 27001, NIST, SOC 2, HIPAA, GDPR, and PCI-DSS.

Qualifications

• Bachelor’s degree in information technology or related field preferred.
• Experience in IT compliance and security, plus internal audits.
• Knowledge of regulatory frameworks (CMMC, ISO 27001, NIST, SOC 2, HIPAA, GDPR, PCI-DSS).
• Strong analytical, writing, and communication skills.

Responsibilities

• Develop and manage client compliance frameworks, policies, and procedures aligned with standards.
• Serve as the main point of contact for audits and compliance reviews.
• Conduct risk assessments and security control testing to identify gaps.
• Address audit findings and implement corrective actions.
• Create and conduct training on compliance best practices.
• Document activities and present reports to management.
• Identify opportunities to automate monitoring and testing.
• Drive ongoing framework development for compliance initiatives.

Skills

IT compliance

Information security

Audit management

Risk assessment

Policy development

Stakeholder communication

Project management

Regulatory frameworks

Education

Bachelor’s degree in IT

Job description

Integrated IT Group is a comprehensive provider of managed, shared, and stand‑alone services for clients throughout Northeast Ohio. These services include managed IT support, cloud solutions, cybersecurity, network solutions, IT consulting, mobile solutions, and disaster recovery for companies in commercial and public sector markets.

Job Description

The responsibilities of a Compliance Engineer include but are not limited to developing, implementing, and maintaining IT security policies and procedures to ensure our clients’ systems align with legal requirements, industry regulations, and internal controls. Collaboration with other internal departments is integral to conduct audits, assess risks, and drive remediation efforts to protect sensitive data and prevent violations. While most of the work can be performed remotely, occasional onsite service for clients may be required.

Essential Functions

• Develop and manage clients’ compliance frameworks, policies, and procedures, ensuring they are aligned with security best practices and regulatory standards like CMMC, GDPR, SOC 2, ISO 27001, and NIST
• Serve as the main point of contact for internal and external audits related to IT systems and compliance
• Conduct regular risk assessments and security control testing for clients to identify potential compliance gaps, risks, and vulnerabilities within the IT infrastructure
• Drive efforts to address any compliance-related incidents, vulnerabilities, or audit findings, recommending corrective actions and process improvements
• Develop and conduct training sessions to educate clients and mentor internal teams on compliance frameworks and best practices
• Maintain accurate documentation of compliance activities, testing results, and policies, preparing and presenting reports to management on the status of the compliance program
• Identify opportunities to automate compliance monitoring and testing to improve efficiency and consistency
• Suggest and implement ongoing framework development of compliance initiatives

Qualifications

• Bachelor’s degree in information technology or a related field is preferred
• Exceptional analytical and problem‑solving skills to identify and address complex issues
• Excellent verbal and written communication skills to effectively communicate with stakeholders, write technical documentation, and explain compliance protocols
• Strong organizational and project management skills to handle multiple initiatives and meet deadlines
• Proven success leading projects in a cross‑functional work environment
• Required skills:
• 3+ years of experience in IT compliance, information security, or internal auditing
• Strong understanding of network security, identity and access management, and data protection principles
• In‑depth knowledge of relevant compliance frameworks including CMMC, ISO 27001, NIST, SOC 2, HIPAA, GDPR, and PCI‑DSS
• Experience in conducting IT audits, performing risk assessments, and managing the audit and remediation process
• Exceptional analytical and problem‑solving skills to identify and address complex compliance issues
• Excellent verbal and written communication skills to effectively communicate with stakeholders, write technical documentation, and explain compliance protocols
• Strong organizational and project management skills to handle multiple compliance initiatives and meet deadlines
• Preferred certifications: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or CISSP

Integrated IT Group is an equal opportunity employer and does not discriminate in hiring or employment, in accordance with the requirements of all applicable laws, including race, color, religion, national origin, ancestry, age, gender, marital status, military status, sexual orientation, disability, or medical condition.